python: buffer() integer overflow leading to out of bounds read

An integer overflow flaw was found in the way the buffer function handled its offset and size arguments. An attacker able to control those arguments could use this flaw to disclose portions of the application memory or cause it to crash...

file: malformed elf file causes access to uninitialized memory

A flaw was found in the way the File Information fileinfo extension parsed Executable and Linkable Format ELF files. A remote attacker could use this flaw to cause a PHP application using fileinfo to crash or disclose certain portions of server memory...

Moderate: Red Hat Security Advisory: file security and bug fix update

Updated file packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

curl: incorrect handle duplication after COPYPOSTFIELDS

A flaw was found in the way the libcurl library performed the duplication of connection handles. If an application set the CURLOPTCOPYPOSTFIELDS option for a handle, using the handle's duplicate could cause the application to crash or disclose a portion of its memory...

postgresql: limited memory disclosure flaw in crypt()

A memory leak error was discovered in the crypt function of the pgCrypto extension. An authenticated attacker could possibly use this flaw to disclose a limited amount of the server memory...

postgresql: limited memory disclosure flaw in crypt()

A memory leak error was discovered in the crypt function of the pgCrypto extension. An authenticated attacker could possibly use this flaw to disclose a limited amount of the server memory...

DSA-3399-1 libpng - security update

Bulletin has no description...

CVE-2015-6086

Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

CVE-2015-6109

CVE-2015-6109 describes a local information-disclosure vulnerability in Windows kernels (Windows 8.1, Server 2012 R2, Windows RT 8.1, Windows 10 initial releases) that allows a local user to bypass KASLR and reveal a driver base address through a crafted application. The underlying issue is a ker...

CVE-2015-6109

The kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to bypass the KASLR protection mechanism, and consequently discover a driver base address, via a crafted application, aka "Windows Kernel Memory Information Disclosure...

Python 3.5 time_strftime() Buffer Over-Read Vulnerability

Python 3.5 suffers from a vulnerability caused by the behavior of the timestrftime function. When called, the function loops over the format string provided, using strchr to search for each instance of '%'. After finding a '%', it continues to search two characters ahead, assuming that each...

Multiple Vulnerabilities in Apple OS X Graphics Drivers (CNVD-2015-07138)

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. A security vulnerability exists in the NVIDIA driver for the Graphics Drivers subsystem in versions of Apple OS X prior to 10.11.1. A local attacker exploiting this vulnerability. It c...

Multiple Vulnerabilities in Apple OS X Graphics Drivers (CNVD-2015-07139)

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. A security vulnerability exists in the NVIDIA driver for the Graphics Drivers subsystem in Apple OS X versions prior to 10.11.1. Exploitation of this vulnerability by a local attacker...

LibreSSL memory leak vulnerability-vulnerability warning-the black bar safety net

Affected system: LibreSSL LibreSSL 2.0.0 - 2.3.0 Description: -------------------------------------------------------------------------------- CVECAN ID: CVE-2 0 1 5-5 3 3 3 LibreSSL is OpenSSL encryption software library a branch, is the Secure Sockets LayerSSLand Transport Layer...

UBUNTU-CVE-2015-7884

The vividfbioctl function in drivers/media/platform/vivid/vivid-osd.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a crafted application...

UBUNTU-CVE-2015-7885

The dgncmgmtioctl function in drivers/staging/dgnc/dgncmgmt.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a crafted application...

Adobe Acrobat/Reader Memory Disclosure Vulnerability (CNVD-2015-06746)

Adobe Reader/Acrobat is a popular application for working with PDF files. A memory disclosure vulnerability exists in Adobe Reader/Acrobat that allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could result in access to sensitive memory information...

Adobe Acrobat/Reader Memory Disclosure Vulnerability (CNVD-2015-06750)

Adobe Reader/Acrobat is a popular application for working with PDF files. A memory disclosure vulnerability exists in Adobe Reader/Acrobat. An attacker is allowed to construct a malicious PDF file and trick the user into parsing it, which can obtain sensitive memory information...

Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2015-06653 )

Internet Explorer is a web browser from Microsoft. Internet Explorer 11 has a security vulnerability in its implementation. A remote attacker can exploit this vulnerability to obtain sensitive information about process memory via parameters constructed within the ArrayBuffer.slice call...

SUSE: Security Advisory for Xen (SUSE-SU-2015:0944-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...